118.200.5.94 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): SingNet Pte Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	RDP Bruteforce	2020-01-29 16:26:21

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.200.5.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14140
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.200.5.94.			IN	A

;; AUTHORITY SECTION:
.			205	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012900 1800 900 604800 86400

;; Query time: 130 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 16:26:18 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

94.5.200.118.in-addr.arpa domain name pointer bb118-200-5-94.singnet.com.sg.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.5.200.118.in-addr.arpa	name = bb118-200-5-94.singnet.com.sg.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
193.106.129.42	attackbots	13.07.2019 17:09:06 - SMTP Spam without Auth on hMailserver Detected by ELinOX-hMail-A2F	2019-07-14 05:10:13
182.61.167.65	attack	Joomla HTTP User Agent Object Injection Vulnerability	2019-07-14 04:57:36
188.131.235.77	attackspam	Jul 13 22:09:49 mail sshd\[30622\]: Invalid user ucpss from 188.131.235.77 Jul 13 22:09:49 mail sshd\[30622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.235.77 Jul 13 22:09:51 mail sshd\[30622\]: Failed password for invalid user ucpss from 188.131.235.77 port 60340 ssh2 ...	2019-07-14 05:22:53
69.17.158.101	attack	Jul 13 20:43:01 MK-Soft-VM7 sshd\[10695\]: Invalid user veronique from 69.17.158.101 port 56452 Jul 13 20:43:01 MK-Soft-VM7 sshd\[10695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.17.158.101 Jul 13 20:43:03 MK-Soft-VM7 sshd\[10695\]: Failed password for invalid user veronique from 69.17.158.101 port 56452 ssh2 ...	2019-07-14 05:21:39
105.157.80.73	attackbots	Lines containing failures of 105.157.80.73 Jul 13 11:42:37 mellenthin postfix/smtpd[22379]: connect from unknown[105.157.80.73] Jul x@x Jul 13 11:42:37 mellenthin postfix/smtpd[22379]: lost connection after DATA from unknown[105.157.80.73] Jul 13 11:42:37 mellenthin postfix/smtpd[22379]: disconnect from unknown[105.157.80.73] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 13 16:53:29 mellenthin postfix/smtpd[5662]: connect from unknown[105.157.80.73] Jul x@x Jul 13 16:53:29 mellenthin postfix/smtpd[5662]: lost connection after DATA from unknown[105.157.80.73] Jul 13 16:53:29 mellenthin postfix/smtpd[5662]: disconnect from unknown[105.157.80.73] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=105.157.80.73	2019-07-14 05:10:40
37.120.135.221	attack	\[2019-07-13 16:55:07\] NOTICE\[22786\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1213' - Wrong password \[2019-07-13 16:55:07\] SECURITY\[22794\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-13T16:55:07.783-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3137",SessionID="0x7f7544449bf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.135.221/64463",Challenge="3b30e4d4",ReceivedChallenge="3b30e4d4",ReceivedHash="dfeb2e955dc8207b30cdbbd13b5cefd5" \[2019-07-13 16:56:12\] NOTICE\[22786\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1290' - Wrong password \[2019-07-13 16:56:12\] SECURITY\[22794\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-13T16:56:12.685-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="18922",SessionID="0x7f7544230ac8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37	2019-07-14 04:58:59
39.33.138.40	attackbotsspam	Lines containing failures of 39.33.138.40 Jul 13 16:53:45 mellenthin postfix/smtpd[7337]: connect from unknown[39.33.138.40] Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.33.138.40	2019-07-14 05:12:15
221.124.19.119	attackbotsspam	Jul 13 22:28:05 meumeu sshd[20666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.124.19.119 Jul 13 22:28:06 meumeu sshd[20666]: Failed password for invalid user hospital from 221.124.19.119 port 44180 ssh2 Jul 13 22:33:56 meumeu sshd[21711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.124.19.119 ...	2019-07-14 04:45:45
62.133.58.66	attack	Jul 13 20:17:52 postfix/smtpd: warning: unknown[62.133.58.66]: SASL LOGIN authentication failed	2019-07-14 05:07:06
197.234.176.185	attack	Automatic report - Port Scan Attack	2019-07-14 04:43:04
89.64.3.40	attackspambots	Lines containing failures of 89.64.3.40 Jul 13 16:53:51 mellenthin postfix/smtpd[5323]: connect from 89-64-3-40.dynamic.chello.pl[89.64.3.40] Jul x@x Jul 13 16:53:51 mellenthin postfix/smtpd[5323]: lost connection after DATA from 89-64-3-40.dynamic.chello.pl[89.64.3.40] Jul 13 16:53:51 mellenthin postfix/smtpd[5323]: disconnect from 89-64-3-40.dynamic.chello.pl[89.64.3.40] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=89.64.3.40	2019-07-14 04:58:10
43.247.180.234	attack	Jul 13 22:40:52 tux-35-217 sshd\[18266\]: Invalid user lc from 43.247.180.234 port 52124 Jul 13 22:40:52 tux-35-217 sshd\[18266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.180.234 Jul 13 22:40:54 tux-35-217 sshd\[18266\]: Failed password for invalid user lc from 43.247.180.234 port 52124 ssh2 Jul 13 22:45:01 tux-35-217 sshd\[18286\]: Invalid user ass from 43.247.180.234 port 35346 Jul 13 22:45:01 tux-35-217 sshd\[18286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.180.234 ...	2019-07-14 04:52:12
92.118.160.5	attackbots	Scanning (more than 2 packets) random ports - tries to find possible vulnerable services	2019-07-14 05:14:07
104.236.175.127	attackbotsspam	Jul 13 22:45:31 * sshd[11931]: Failed password for invalid user cactiuser from 104.236.175.127 port 58948 ssh2 Jul 13 22:55:45 * sshd[11997]: Failed password for invalid user gitolite3 from 104.236.175.127 port 38820 ssh2 Jul 13 23:01:01 * sshd[12062]: Failed password for invalid user mt from 104.236.175.127 port 40410 ssh2 Jul 13 23:06:00 * sshd[12150]: Failed password for invalid user elk from 104.236.175.127 port 42004 ssh2 Jul 13 23:11:12 * sshd[12248]: Failed password for invalid user marwan from 104.236.175.127 port 43596 ssh2 Jul 13 23:16:23 * sshd[12280]: Failed password for invalid user oracle from 104.236.175.127 port 45192 ssh2 Jul 13 23:21:24 * sshd[12344]: Failed password for invalid user admin from 104.236.175.127 port 46782 ssh2 Jul 13 23:26:38 * sshd[12437]: Failed password for invalid user elasticsearch from 104.236.175.127 port 48384 ssh2 Jul 13 23:31:48 * sshd[12479]: Failed password for invalid user admin from 104.236.175.127 port 49974 ssh2 Jul 13 23:36:49 * sshd[12558	2019-07-14 05:23:37
84.212.241.205	attack	Automatic report - Port Scan Attack	2019-07-14 05:07:46

最近上报的IP列表

208.48.167.215	183.88.12.59	77.55.235.156	213.148.204.176
185.101.33.143	111.90.150.183	63.83.40.95	161.33.145.75
228.31.95.120	200.236.99.70	89.66.228.133	240.155.14.173
117.34.191.79	134.209.153.250	60.248.218.128	117.94.222.6
223.241.30.13	182.112.216.136	175.153.91.146	163.172.119.155